> ## Documentation Index
> Fetch the complete documentation index at: https://agent-observability-docs.splunk.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Add Users and Assign Roles

> Learn how to add users and assign roles in Splunk Agent Observability

After you set up Splunk Agent Observability, you can add users and assign them roles to grant different levels of access to the system.

Access control varies depending on your deployment option. Select the tab for your deployment option to view the documentation.

<Tabs>
  <Tab title="On-premises">
    The following sections apply to on-premises, standalone, and custom deployments of Splunk Agent Observability.

    ## System-level roles (On-premises)

    You can assign users the following roles:

    * **Admin**: Full access to the organization, including viewing all projects.
    * **Manager** (enterprise only): Can add and remove users.
    * **User**: Can create, update, share, and delete projects and resources within projects.
    * **Read-only**: Cannot create, update, share, or delete any projects or resources. Limited to view-only permissions.

    <Note>
      Free users of Splunk Agent Observability can only use the Admin, User, or Read-only roles. [Contact us](https://www.splunk.com/en_us/about-splunk/contact-us.html) to explore a paid plan and get full RBAC.
    </Note>

    In table form:

    |                                       | Admin                              | Manager                                         | User                                       | Read-only                                  |
    | ------------------------------------- | ---------------------------------- | ----------------------------------------------- | ------------------------------------------ | ------------------------------------------ |
    | View all projects                     | <Icon icon="square-check" />       | <Icon icon="square-xmark" />                    | <Icon icon="square-xmark" />               | <Icon icon="square-xmark" />               |
    | Add/delete users                      | <Icon icon="square-check" />       | <Icon icon="square-check" /> (excluding admins) | <Icon icon="square-xmark" />               | <Icon icon="square-xmark" />               |
    | Create groups, invite users to groups | <Icon icon="square-check" />       | <Icon icon="square-check" />                    | <Icon icon="square-check" />               | <Icon icon="square-xmark" />               |
    | Create/update projects                | <Icon icon="square-check" />       | <Icon icon="square-check" />                    | <Icon icon="square-check" />               | <Icon icon="square-xmark" />               |
    | Share projects                        | <Icon icon="square-check" />       | <Icon icon="square-check" />                    | <Icon icon="square-check" />               | <Icon icon="square-xmark" />               |
    | View projects                         | <Icon icon="square-check" /> (all) | <Icon icon="square-check" /> (only shared)      | <Icon icon="square-check" /> (only shared) | <Icon icon="square-check" /> (only shared) |

    ## Add users to your organization (On-premises)

    You must have the admin or manager role to add users to your organization.

    To send email invitations to users, follow these steps:

    1. Log into Splunk Agent Observability.
    2. Select your user profile in the upper-right corner.

           <img src="https://mintcdn.com/agent-observability-docs/i6IIDOves2sy1VUe/images/console-ui/user-menu-sao.png?fit=max&auto=format&n=i6IIDOves2sy1VUe&q=85&s=e927eb14c7815f5ccae0c0c1e43eb21e" alt="The user menu" width="2424" height="914" data-path="images/console-ui/user-menu-sao.png" />
    3. Select **Users**.
    4. Select **Invite Users**.
    5. Enter the emails of the users you want to invite and the role you want to assign to them. See [System-level roles](/concepts/access-control#system-level-roles-on-premises) for more information on roles.
    6. Select **Invite**.

    Users receive an email from Splunk Agent Observability with a link to sign up. After you invite a user, their email appears in the **Users** list.

    ## Assign roles to users (On-premises)

    To assign a role to user who is already part of your organization, follow these steps:

    1. Log into Splunk Agent Observability.
    2. Select your user profile in the upper-right corner.

           <img src="https://mintcdn.com/agent-observability-docs/i6IIDOves2sy1VUe/images/console-ui/user-menu-sao.png?fit=max&auto=format&n=i6IIDOves2sy1VUe&q=85&s=e927eb14c7815f5ccae0c0c1e43eb21e" alt="The user menu" width="2424" height="914" data-path="images/console-ui/user-menu-sao.png" />
    3. Select **Users**.
    4. Search for the user's email. In the row for the user, select their **Role** and choose a new role from the drop-down menu.

    ## Related resources (On-premises)

    <CardGroup cols={2}>
      <Card title="Access Control" horizontal href="/concepts/access-control#on-premises">
        Learn about access control and related features.
      </Card>
    </CardGroup>
  </Tab>

  <Tab title="SaaS">
    The following sections apply to SaaS deployments integrated with Splunk Observability Cloud.

    Splunk Agent Observability users need an **agent\_observability** role to view and manage Agent Observability resources. Agent Observability roles are different from standard [Splunk Observability Cloud roles](https://help.splunk.com/en/splunk-observability-cloud/administer/user-and-team-management/manage-roles#pre-defined-roles-0).

    ## System-level roles (SaaS)

    You can assign users the following roles:

    * **agent\_observability\_admin**: Full access to the organization, including viewing all projects.
    * **agent\_observability\_manager**: Can add and remove users.
    * **agent\_observability\_user**: Can create, update, share, and delete projects and resources within projects.
    * **agent\_observability\_read\_only**: Cannot create, update, share, or delete any projects or resources. Limited to view-only permissions.

    In table form:

    |                                       | agent\_observability\_admin        | agent\_observability\_manager                   | agent\_observability\_user                 | agent\_observability\_read\_only           |
    | ------------------------------------- | ---------------------------------- | ----------------------------------------------- | ------------------------------------------ | ------------------------------------------ |
    | View all projects                     | <Icon icon="square-check" />       | <Icon icon="square-xmark" />                    | <Icon icon="square-xmark" />               | <Icon icon="square-xmark" />               |
    | Add/delete users                      | <Icon icon="square-check" />       | <Icon icon="square-check" /> (excluding admins) | <Icon icon="square-xmark" />               | <Icon icon="square-xmark" />               |
    | Create groups, invite users to groups | <Icon icon="square-check" />       | <Icon icon="square-check" />                    | <Icon icon="square-check" />               | <Icon icon="square-xmark" />               |
    | Create/update projects                | <Icon icon="square-check" />       | <Icon icon="square-check" />                    | <Icon icon="square-check" />               | <Icon icon="square-xmark" />               |
    | Share projects                        | <Icon icon="square-check" />       | <Icon icon="square-check" />                    | <Icon icon="square-check" />               | <Icon icon="square-xmark" />               |
    | View projects                         | <Icon icon="square-check" /> (all) | <Icon icon="square-check" /> (only shared)      | <Icon icon="square-check" /> (only shared) | <Icon icon="square-check" /> (only shared) |

    ## Add users to your organization (SaaS)

    You must have the **agent\_observability\_admin** or **agent\_observability\_manager** role to add users to your organization.

    To send email invitations to users, follow these steps:

    1. From the Splunk Observability main menu, select **Settings**.
    2. Select **Users**.
    3. Select **Invite Users**.
    4. Enter the emails of the users you want to invite and the role(s) you want to assign to them.
           <Note>
             To view or manage Agent Observability resources, users need an **agent\_observability** role. See [System-level roles](/concepts/access-control#system-level-roles-saas) for more information on roles.
           </Note>
    5. Select **Send Invitation**.

    Users receive an email from Splunk Observability Cloud with a link to sign up. After they sign up, their names appear in the **Settings** > **Users** list.

    ## Assign roles to users (SaaS)

    To assign roles to a user who is already a member of your organization, follow these steps:

    1. In the Splunk Observability Cloud main menu, select **Settings** > **Users**.
    2. Find the name of the user.
    3. Select the actions (**⋮**) menu icon next to the username, then select **Manage Roles**.
    4. Assign an **agent\_observability** role. For example:
           <img src="https://mintcdn.com/agent-observability-docs/S2YtyGeaE6xrJzrS/images/saas/saas-manage-roles.png?fit=max&auto=format&n=S2YtyGeaE6xrJzrS&q=85&s=5ffd4d8885bb02e4398df57a2ac9e352" alt="SaaS Agent Observability roles" width="1138" height="617" data-path="images/saas/saas-manage-roles.png" />
       See [System-level roles](#system-level-roles-saas) for more information on roles.
    5. Select **Assign Roles** to confirm.

    For more information on assigning roles, see [Assign roles to users in Splunk Observability Cloud](https://help.splunk.com/en/splunk-observability-cloud/administer/user-and-team-management/manage-roles/assign-roles-to-users).

    ## Related resources (SaaS)

    <CardGroup cols={2}>
      <Card title="Access Control" horizontal href="/concepts/access-control#saas">
        Learn about access control and related features.
      </Card>

      <Card title="Manage users and teams" horizontal href="https://help.splunk.com/en/splunk-observability-cloud/administer/user-and-team-management">
        Learn about user management in Splunk Observability Cloud.
      </Card>
    </CardGroup>
  </Tab>
</Tabs>
